This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
File:                     1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer (raw, json)
Hash identifier:          o2v/3Mfx557TQ+hiTqaBkzCS+T2ouZHRJKpePJVfBl0=
Subject key identifier:   11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584C2153E87A390E61A874B0E140
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 09 Dec 2025 13:45:22 +0000
Certificate not after:    Mon 13 Mar 2028 12:45:22 +0000
Subordinate resources:    AS: 19194
                          IP: 23.226.32.0/20
                          IP: 23.226.208.0/20
                          IP: 23.239.160.0/19
                          IP: 64.140.128.0/20
                          IP: 107.155.192.0/18
                          IP: 2602:ff95::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:21:53:e8:7a:39:0e:61:a8:74:b0:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Dec  9 13:45:22 2025 GMT
            Not After : Mar 13 12:45:22 2028 GMT
        Subject: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2c:ac:a1:42:14:4a:ce:6c:d8:8b:2d:e6:9f:
                    db:10:b1:55:1b:a5:65:b4:f8:4c:e6:fb:80:3d:55:
                    41:6b:57:69:40:2c:6a:39:1f:e8:ff:b3:82:44:6f:
                    16:31:f9:de:0f:92:8e:5a:58:f4:6d:c8:57:0c:4b:
                    0e:1c:b9:23:96:76:5f:f3:b0:88:3e:04:72:ec:0d:
                    65:46:c6:01:7d:19:f0:0c:35:39:7d:8f:c8:80:fe:
                    d7:30:77:e5:ef:ae:ec:81:90:07:70:7d:cb:4f:2c:
                    01:f9:9e:9e:da:d1:0d:77:0e:11:c5:b4:de:0d:2f:
                    54:44:ec:eb:af:57:ce:97:53:e6:ec:9f:fe:d4:cd:
                    10:7a:d7:1f:84:f9:6e:a5:89:b1:2f:07:dd:29:77:
                    e8:a3:bf:42:c9:d5:26:59:6d:33:68:88:d4:85:79:
                    e7:9c:39:2d:8d:e1:bb:08:26:1e:8e:85:7e:82:0d:
                    c0:02:60:46:d8:34:d0:6b:76:d9:6e:99:86:ca:62:
                    20:a0:09:2e:84:f1:de:d1:4a:1d:d2:73:92:68:5b:
                    d8:dd:b2:e1:b9:13:ae:c1:de:fd:16:3e:22:d6:bd:
                    ae:a7:54:8f:d0:06:d5:8f:41:f2:87:12:fd:7c:33:
                    85:ed:dc:6b:91:2a:5e:bc:50:4c:21:cc:c3:93:68:
                    93:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.32.0/20
                  23.226.208.0/20
                  23.239.160.0/19
                  64.140.128.0/20
                  107.155.192.0/18
                IPv6:
                  2602:ff95::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19194

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:ff:9e:83:b2:2a:7d:91:5e:e4:38:10:41:16:c4:e2:f9:14:
         5f:eb:2c:7e:58:7b:83:86:2f:a3:63:52:ec:f6:b1:4b:e5:c2:
         01:66:63:ea:28:3d:d1:50:e6:97:e3:66:39:7b:b2:02:db:35:
         31:df:c7:d9:e4:e3:92:25:3c:53:65:a5:ad:84:2b:ab:1a:de:
         5e:00:57:5e:d7:ff:26:1f:f3:12:23:3b:2b:d5:bb:94:79:1a:
         b0:4c:91:b0:c9:01:03:d9:85:35:97:e6:ad:f5:16:94:e7:06:
         c7:64:f4:88:e9:77:24:d9:c1:47:fb:1b:aa:dd:67:47:c7:82:
         73:b9:90:0e:35:63:a2:ef:c4:b3:c0:11:9a:f5:98:5e:2d:fc:
         68:7a:7f:8e:bf:c0:40:28:3e:d6:94:d5:71:81:1f:84:7b:b0:
         2c:5a:f2:a8:a3:cd:f9:ca:0f:98:9f:2d:a6:db:76:46:ee:37:
         d8:30:e0:2e:ea:0c:52:bb:d7:29:49:c0:5c:02:c9:4e:6c:ac:
         5c:e2:d0:1a:df:2b:5a:9c:d7:e4:e5:b8:f7:90:55:54:c1:c8:
         cc:bc:9d:ed:16:7a:2c:d0:02:8f:85:7e:17:d7:4e:5b:d0:cc:
         a9:fb:ba:6f:e5:17:64:fd:4b:2d:60:ca:4a:e9:ce:5d:5b:42:
         e1:ba:14:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 12:08:18 2025 by rpki-client